Re: [Openvpn-devel] openvpn-2.1.0-r1: easy-rsa tools creates broken client CERTs unusable for TLS

2010-06-09 Thread David Sommerseth
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/06/10 18:24, Martin Mokrejs wrote: > Hi, > I had a look into the original bug report I sent and the summary is this: > at some version openvpn implemented a more strict check for certificate > values and if teh cjeck fails one yields "unsupport

Re: [Openvpn-devel] openvpn-2.1.0-r1: easy-rsa tools creates broken client CERTs unusable for TLS

2010-06-09 Thread Martin Mokrejs
Hi, David Sommerseth wrote: > On 08/06/10 18:24, Martin Mokrejs wrote: >> Hi, >> I had a look into the original bug report I sent and the summary is this: >> at some version openvpn implemented a more strict check for certificate >> values and if teh cjeck fails one yields "unsupported certifica

Re: [Openvpn-devel] openvpn-2.1.0-r1: easy-rsa tools creates broken client CERTs unusable for TLS

2010-06-09 Thread Jan Just Keijser
Hi, Martin Mokrejs wrote: Hi, David Sommerseth wrote: On 08/06/10 18:24, Martin Mokrejs wrote: Hi, I had a look into the original bug report I sent and the summary is this: at some version openvpn implemented a more strict check for certificate values and if teh cjeck fails one yiel

Re: [Openvpn-devel] openvpn-2.1.0-r1: easy-rsa tools creates broken client CERTs unusable for TLS

2010-06-09 Thread David Sommerseth
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/06/10 23:56, Martin MOKREJŠ wrote: > The patches in Gentoo I for example here: > http://mirror.averse.net/gentoo-portage/net-misc/openvpn/files/ > >>> On the client: >>> I use net-misc/openvpn-2.1.0-r1, I see there are two patches applying to

Re: [Openvpn-devel] openvpn-2.1.0-r1: easy-rsa tools creates broken client CERTs unusable for TLS

2010-06-09 Thread Martin Mokrejs
David Sommerseth wrote: > On 09/06/10 23:56, Martin MOKREJ` wrote: >> The patches in Gentoo I for example here: I use Gentoo, I believed that was a "typo" of Jan and did not comment on that. >> Please improve the openVPN docs. Further, isn't it possible to >> provide two openssl.cf files, one